EUVD-2025-10354

Malicious code in bioql PyPI...

CVE-2025-28405

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the changeStatus method...

CVE-2025-28405

The backend management system RUoYi v.4.8.0 contains an improper access control vulnerability (CWE-284) within the changeStatus method. A remote attacker can exploit this issue to perform privilege escalation . As a mitigation, it is recommended to disable the changeStatus method until a formal p...

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v.4.8.0, which can be exploited by a remote attacker to elevate privileges via the changeStatus method...